Bug 58836 (CVE-2004-0559) - VUL-0: CVE-2004-0559: temp file problem in webmin %pre and %post scripts
Summary: VUL-0: CVE-2004-0559: temp file problem in webmin %pre and %post scripts
Status: RESOLVED FIXED
Alias: CVE-2004-0559
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: All Linux
: P3 - Medium : Major
Target Milestone: ---
Assignee: Ihno Krumreich
QA Contact: Security Team bot
URL:
Whiteboard: CVE-2004-0559: CVSS v2 Base Score: 2....
Keywords:
Depends on:
Blocks:
 
Reported: 2004-08-16 18:13 UTC by Ludwig Nussel
Modified: 2021-10-12 13:31 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ludwig Nussel 2004-08-16 18:13:27 UTC 
the %post script writes stuff into the directory /tmp/.webmin/. This directory  
is created in an insecure way in %pre. Please fix the .spec to not use such a  
directory at all.
Comment 1 Ludwig Nussel 2004-08-16 18:13:27 UTC 
<!-- SBZ_reproduce  -->
hewitt:/tmp# su - abuild 
hewitt:/usr/src/packages/BUILD/webmin-1.150$ cd /tmp/ 
hewitt:/tmp$ mkdir .webmin 
hewitt:/tmp$ cd .webmin/ 
hewitt:/tmp/.webmin$ cat /etc/issue 
 
Welcome to SuSE Linux 8.2 (i586) - Kernel \r (\l). 
 
 
hewitt:/tmp/.webmin$ ln -s /etc/issue webmin-setup.out 
hewitt:/tmp/.webmin$ l 
total 8 
drwxr-xr-x    2 abuild   abuild       4096 Aug 16 10:02 ./ 
drwxrwxrwt    5 root     root         4096 Aug 16 10:01 ../ 
lrwxrwxrwx    1 abuild   abuild         10 Aug 16 10:02 webmin-setup.out 
-> /etc/issue 
hewitt:/tmp/.webmin$ logout 
hewitt:/tmp# cd - 
/usr/src/packages/RPMS/noarch 
hewitt:/usr/src/packages/RPMS/noarch# rpm -Uvh webmin-1.150-3.noarch.rpm  
failed to stat /sys: No such file or directory 
Operating system is SuSE Linux 8.2 
webmin                      ################################################## 
insserv: Service network has to be enabled for service webmin 
insserv: exiting now! 
Webmin install complete. You can now login to http://hewitt:10000/ 
as root with your root password. 
hewitt:/usr/src/packages/RPMS/noarch# head /etc/issue 
*********************************************************************** 
*            Welcome to the Webmin setup script, version 1.150        * 
*********************************************************************** 
Webmin is a web-based interface that allows Unix-like operating 
systems and common Unix services to be easily administered. 
 
Installing Webmin in /usr/lib/webmin ... 
 
*********************************************************************** 
Webmin uses separate directories for configuration files and log files.
Comment 2 Ludwig Nussel 2004-08-23 18:38:30 UTC 
CAN-2004-0559
Comment 3 Ludwig Nussel 2004-08-25 17:10:08 UTC 
packages approved
Comment 4 Thomas Biege 2009-10-13 20:32:23 UTC 
CVE-2004-0559: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)